Check Point                       Overview             Features             Specifications
                                     
Power-1 11000 Series: Solutions for large enterprises and data centers. Includes 3 models:
  • Power-1 11065: Provides firewall throughput up to 15 Gbps and IPS up to 10 Gbps. Field upgradable to Power-1 11075 or Power-1 11085
  • Power-1 11075: Provides firewall throughput up to 20 Gbps and IPS up to 12 Gbps. Field upgradable to Power-1 11085
  • Power-1 11085: Provides firewall throughput up to 25 Gbps and IPS up to 15 Gbps.
Power-1 9075: Solution for enterprises and data centers.

Power-1 5075: Solution for enterprises and head quarters.

Hardware Specifications

Appliance
Power-1 5075
Power-1 9075
Power-1 11000 Series
11065
11075
11085
Software Edition R65, R70 R65, R70 R70 R70 R70
Operating System Secure
Platform		 Secure
Platform		 Secure
Platform		 Secure
Platform		 Secure
Platform
10/100/1000 Ports 10/14 14/18 14/18 14/18 14/18
10Gb ports 2 optional 4 optional 4 optional 4 optional 4 optional
Firewall Throughput1 9 Gbps 16 Gbps 15 Gbps 20 Gbps 25 Gbps
VPN Throughput1 2.4 Gbps 3.7 Gbps 3.7 Gbps 4 Gbps 4.5 Gbps
Concurrent Sessions 1.2 Million 1.2 Million 1.2 Million 1.2 Million 1.2 Million
IPS Throughput1 7.5 Gbps2 10 Gbps2 10 Gbps2 12 Gbps2 15 Gbps2
Licensed Users Unlimited Unlimited Unlimited Unlimited Unlimited
VLANs 10243 10243 10243 10243 10243
UTM out of the box Optional Optional Optional Optional Optional
Security Acceleration Yes Yes Yes Yes Yes
Storage 160 GB 2 x 160 GB 2 x 250 GB 2 x 250 GB 2 x 250 GB
Enclosure 2U 2U 2U 2U 2U
Dimensions (standard) 17 x 20 x 3.46 in. 17 x 20 x 3.46 in. 17 x 22.8 x 3.46 in. 17 x 22.8 x 3.46 in. 17 x 22.8 x 3.46 in.
Dimensions (metric) 431 x 509.5 x 88mm 431 x 509.5 x 88mm 431 x 580 x 88mm 431 x 580 x 88mm 431 x 580 x 88mm
Weight 14.5kg (31.9lbs) 16.5kg (36.3lbs) 23.4kg (51.6lbs) 23.4kg (51.6lbs) 23.4kg (51.6lbs)
Operating Environment Temperature: 5° to 40° C, Humidity: 10%-85% non-condensing, Altitude: 2,500m
Power Input 100~240V, 50~60Hz4
Power Supply Spec (Max) 250W 400W 500W 500W 500W
Power Consumption (Max) 164.1W 200.7W 253.2W 253.2W 253.2W
Compliance UL 60950; FCC Part 15, Subpart B, Class A; EN 55024; EN 55022; VCCI V-3AS/NZS 3548:1995; CNS 13438 Class A (test passed; country approval pending); KN22KN61000-4 Series, TTA; IC-950; ROHS

1 Performance data represent the maximum capabilities of the systems as measured under optimal testing conditions. Deployment and policy considerations may impact performance result.
2 Test based on real-world traffic blend using the default profile.
3 Maximum of 256 VLANs per interface.
4 Redundant Power Supply.

Software Specifications

Power-1 Appliances
5075
9075
11065
11075
11085
Software Edition R70 R70 R70 R70 R70
Firewall Software Blade
IPsec VPN Software Blade
IPS Software Blade
Acceleration & Clustering
Advanced Networking
URL Filtering * * * * *
Antivirus & Anti-Malware * * * * *
Anti-Spam & Email Security * * * * *
Web Security * * * * *
Voice over IP * * * * *

- Included
* - Optional

Security Specifications
Protection Details
Firewall Software Blade
Protocol/application support
Secures more than 200 applications and protocols
VoIP protection
SIP, H.323, MGCP, and SCCP with NAT support
Instant messaging control
MSN, Yahoo, ICQ, Skype, GoogleTalk, and QQ Instant Messenger
Peer-to-peer blocking
Kazaa, Gnutella, BitTorrent, eMule, DirectConnect, Soulseek, Thunder, and Winny
Network address translation
Static/hide NAT support with manual and automatic rules
Layer-2 bridge support
Transparently integrates into existing network
IPsec VPN Software Blade
Encryption support
AES 128-256 bit, 3DES 56-168 bit
Authentication methods
Password, RADIUS, TACACS, X.509, SecurID, LDAP
Certificate authority
Integrated certificate authority (X.509)
VPN communities
Automatically sets up site-to-site connections as objects are created
Topology support
Star and mesh
Route-based VPN
Utilizes virtual tunnel interfaces; numbered/unnumbered interfaces
VPN agent support
Complete Endpoint security with VPN, desktop firewall
SSL-based remote access
Fully integrated SSL VPN gateway provides on-demand SSL-based access
SSL-based endpoint scanning
Scans endpoint for compliance/malware prior to admission to the network
IPS Software Blade
Network-layer protection
Blocks attacks such as DoS, port scanning, IP/ICMP/TCP-related
Application-layer protection
Blocks attacks such as DNS cache poisoning, FTP bounce, improper commands
Detection methods
Signature-based, behavioral, and protocol anomaly
Advanced Networking Software Blade
ISP redundancy
Protocol-based, source/destination and port route decisions
Routing support
OSPF, BGP, RIP v1/2, IGMP, PIM-DM, PIM-SM
Quality of Service
Floodgate-1® provides granular QoS control
Server load balancing
ConnectControl distributes connection requests using one of five load balancing algorithms
Acceleration and Clustering Software Blade
CoreXL1
Balances security decisions across multiple cores
SecureXL
Offloading of security inspection to a performance-optimized software module
SecureXL firewall security features
Access control, encryption, NAT, accounting and logging, connection/session rate, general security checks, IPS features, CIFs resources, TCP sequence verification, dynamic VPN
High availability
Active/passive and active/active failover options
State synchronization
Ensures stateful failover of connections
Sync members supported
Up to 5 members
Load balancing
ClusterXL provides near linear scaling
Link Aggregation
Load balancing and high availability the interfaces
Critical device notifications
Network interfaces, synchronization status, firewall policy status, ClusterXL process status, and firewall process status
Management and reporting
Centralized management
Managed by Check Point centralized Security Management and Provider-1
Monitoring/logging
SmartView Tracker™ provides advanced monitoring and logging
Reporting
Fully integrated with the Monitoring, SmartReporter, and SmartEvent Software Blades
Command line interface
SSH
SecurePlatform
Secure OS
Pre-hardened, optimized operating system
Web based administration
Enables quick, easy, and secure administration from anywhere in the network
Backup and restore
For disaster recovery planning
Centralized administrative rights
RADIUS authentication and RADIUS groups
DHCP support
SecurePlatform™ DHCP server and relay

1 Included in the Security Gateway Container